What problem does it solve?
This skill automates the creation, security review, and test-driven validation of Open Policy Agent Rego policies so teams avoid insecure authorizations and manual policy mistakes.
Core Features & Use Cases
- Policy generation: Create policies that start with explicit default deny and use modern Rego syntax.
- Security review: Apply a checklist to detect input validation gaps, privilege escalation, path traversal, regex risks, and information leakage.
- Test generation & validation: Produce comprehensive test suites covering allow, deny, and edge cases and validate policies with OPA tooling.
- Use case: Author RBAC or ABAC policies for API gateways, Kubernetes admission controllers, or internal authorization services and ship them with passing tests and auditable decisions.
Quick Start
Create a Rego policy that grants admins full access, editors read and write, and viewers read-only for resource type document.